The service offers solid privacy rights and opt-out mechanisms, but its data collection and sharing practices are broad and heavily advertising-oriented.
Walmart’s privacy notice is detailed and gives users meaningful controls in U.S. states, including access, correction, deletion, portability, and opt-outs for targeted advertising and sale/sharing. It also states GPC is honored and provides a deletion path in the app or by contact request. On the other hand, Walmart collects a broad range of data, uses tracking and advertising partners, and shares data with vendors, affiliates, and analytics/marketing partners.
Points of interest
Walmart collects a very wide range of data, including identifiers, browsing activity, purchase history, communications, demographics, financial information, biometrics, and geolocation. For shoppers, that means extensive profiling potential across online and in-store activity.
"“We may collect or receive the categories of personal information listed below...”"
The notice says Walmart shares data with advertising, marketing, and technology partners, including use of cookies, pixels, beacons, and similar tools. Practically, this supports cross-site ad targeting and measurement.
"“We work with various advertising, marketing, and other related technology partners...”"
Walmart keeps personal information as long as needed for the stated purposes and according to internal policy, without a fixed universal deletion deadline. That can mean long retention periods depending on the data and use case.
"“We will keep the personal information we collect about you for as long as necessary...”"
Walmart says it will honor Global Privacy Control and other opt-out requests for sale/sharing, including targeted advertising. That gives users a browser-level way to signal privacy preferences without digging through settings.
"“We will honor your request with respect to the browser that sends us the GPC signal.”"
Users can delete their Walmart account through the app or by contacting support. That is a clear deletion path, though the notice says some requests may be subject to legal exceptions.
"“To delete your Walmart account, use the Contact Us section below. Or, within our mobile apps... click the ‘Delete Account’ link.”"
In certain states, Walmart says you can access, correct, delete, and receive your data in a portable format. This is a meaningful consumer-rights package for users in covered jurisdictions.
"“You may have the right to obtain your personal information in a portable format that allows you to transmit the personal data to another entity.”"
Walmart says it uses cameras, call recording, and ALPR where permitted by law for security and operational purposes. This is not unusual for a retailer, but it is still important for users to know their in-store activity may be recorded.
"“we operate cameras and automated technologies in-store... Automated License Plate Readers (ALPR) may also be in use”"
For eyeglass virtual try-on, Walmart says biometric data is deleted within 48 hours and is not sold or shared. That limits the risk from one of the most sensitive data types it collects.
"“Any biometric data we collect from you will be deleted within 48 hours... We do not sell or share any biometric information collected through our eyeglass virtual try-on service.”"
Other Shopping services on AIgree
Compare Walmart with…
The 7 clauses that actually matter, the red flags to watch for, in 5 minutes.
Report a problem with this summary
Spot something wrong, missing, or misleading? Tell us — we review every report.
Spot something wrong, missing, or misleading? Tell us — we review every report.
Thanks — your report was submitted and will be reviewed.
Documents
Terms of Service
source ↗- •This document is a social media engagement guideline, not Walmart’s general customer Terms of Service.
- •Walmart says it honors Global Privacy Control and other opt-out requests for selling or sharing personal information, including targeted advertising.
- •Walmart’s social media pages welcome discussion, but Walmart does not necessarily agree with, verify, or endorse user-posted content.
- •Use of Walmart’s Twitter presence is also subject to Twitter’s own terms of use.
- •On Facebook and Instagram, users must follow the law, stay polite, and keep posts relevant to the community.
- •Walmart may remove posts it considers off-topic, spam, promotional, linked to third-party sites, fake, anonymous, or otherwise against its guidelines.
- •Walmart associates must not share confidential or private company, product, service, or customer information on social media.
- •Associates must follow company social media and information policies and cannot claim to speak for Walmart without written authorization.
- •Associates are asked not to give official responses to customer inquiries on Walmart’s social pages; Walmart’s social team handles those responses.
- •No refund, termination, warranty, liability limit, or dispute resolution terms appear in this document excerpt.
Privacy Policy
source ↗- •Walmart explains it collects, uses, and shares personal information for operating services, improving systems, targeted advertising, and security and fraud prevention.
- •The notice covers Walmart U.S. and Puerto Rico retail, and Walmart websites, mobile apps, and services where posted, but not specialized operations like pharmacies.
- •Walmart may collect identifiers, device and online data (including cookies and ad IDs), browsing and activity data, purchase and transaction data, communications, demographic and financial data.
- •It describes collection through direct user actions, automated technologies (including cameras, call recording, and ALPR where permitted), and data from corporate-family and third parties.
- •Sensitive data may be processed for the listed purposes, and where required by law Walmart processes sensitive data only with your consent.
- •Walmart may disclose personal information to corporate-family companies, vendors (shipping, billing/refunds, payment processors), marketplace co-branded partners, advertising/analytics partners, and for legal reasons.
- •For marketing, Walmart uses opt-in for automated phone/text and sharing for direct marketing outside its corporate family, and opt-out for email, push, and postal mail.
- •You can access, correct, delete, and opt out of targeted advertising or sale/sharing in applicable U.S. states via “Your Privacy Choices,” and identity verification is required.
- •Walmart retains data as long as needed for the notice’s purposes, and it states it permanently destroys biometric identifiers under a schedule based on satisfaction of purpose, time, or law.
- •The document does not state specific refund terms, and it does not provide a dispute resolution process or liability limits—only privacy rights and practices.
